Latest Bulletins aws.amazon.com

CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

aws.amazon.com·1w1 week ago

Actions for CVE-2026-10584 - HTTPS Fallback to HTTP in Graph Explorer

CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

aws.amazon.com·1w1 week ago

Actions for CVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Paths

CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

aws.amazon.com·2w2 weeks ago

Actions for CVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processing

CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI

aws.amazon.com·2w2 weeks ago

Actions for CVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLI

CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

aws.amazon.com·3w3 weeks ago

Actions for CVE-2026-9133 - Arbitrary file read in rabbitmq-aws plugin

CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver

aws.amazon.com·3w3 weeks ago

Actions for CVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driver

CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing

aws.amazon.com·3w3 weeks ago

Actions for CVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsing

Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)

aws.amazon.com·3w3 weeks ago

Actions for Issue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 &amp: CVE-2026-8597)

Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel

aws.amazon.com·4w4 weeks ago

Actions for Fragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernel

Ongoing updates on Copy.fail and variants

aws.amazon.com·4w4 weeks ago

Actions for Ongoing updates on Copy.fail and variants

CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

aws.amazon.com·4w4 weeks ago

Actions for CVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driver

Dirty Frag and other issues in Amazon Linux kernels

aws.amazon.com·4w4 weeks ago·Hacker News

Actions for Dirty Frag and other issues in Amazon Linux kernels

CVE-2026-31431

aws.amazon.com·5w5 weeks ago

Actions for CVE-2026-31431

CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

aws.amazon.com·5w5 weeks ago

Actions for CVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agent

CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

aws.amazon.com·5w5 weeks ago

Actions for CVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentials

Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

aws.amazon.com·6w6 weeks ago

Actions for Issue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issues

CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

aws.amazon.com·6w6 weeks ago

Actions for CVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCP

Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow

aws.amazon.com·6w6 weeks ago

Actions for Issue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflow

CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS

aws.amazon.com·6w6 weeks ago

Actions for CVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWS

Issues in tough library and tuftool CLI utility

aws.amazon.com·6w6 weeks ago

Actions for Issues in tough library and tuftool CLI utility

Log in to enable infinite scrolling